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DUPLICATE 



A CONTROL SYSTEM 

Embodiments of the present invention relate to a control system, particularly control 
systems that have redundancy. 

Previously in an aeroplane, each engine input and output function had redundancy of 
communication along separate dedicated hardwired communication paths. This 
redundancy meant that if one hardwired path should fail, the function can still be 
provided via the second hardwired path. Two dedicated hardwired communication 
paths are provided for each function eg throttle control, oil pressure etc. This results in 
a very complex wiring system which is difficult to design and maintain. 

It would be desirable to network the engines using a digital data network so that data 
can be communicated to and from the engines without requiring a large number of 
dedicated hardwired communication paths. However, it is important that in such a 
system that data is communicated to the correct engine and that data from an engine 
can be correctly identified as from that engine. 

According to one aspect of the present invention there is provided a control system 
comprising: a plurality of input devices; a plurality of remote output devices; a plurality 
of dedicated connections, wherein each one of the plurality of output devices is 
connected to one of the plurality of input devices by an associated one of the plurality of 
dedicated connections; and a digital data network interconnecting the plurality of input 
devices and the plurality of remote output devices, wherein each output device is 
operable to use a network address dependent upon a value received via its dedicated 
connection. 

Thus a digital data network can be used reliably to control the output devices. The 
control system can establish a correct network configuration such that the output 
devices are correctly addressed. This allows the control system to be used, for 
example, in an aeroplane, where the output devices are aero-engines. ^ 
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According to another aspect of the present invention there is provided an aero-engine 
system comprising: 

a first input for receiving a dedicated connection to a first thrust control device; 

an interface for communicating with a digital data network connected to a plurality thrust 
control devices including the first thrust control device; and 

network control means for controlling the reception and transmission of data packets 
via the digital data network and operable to use a network address dependent upon a 
value received via the first input. 

According to a further aspect of the present invention there is provided a method of 
configuring a networked aero-engine comprising the steps of: 

providing a network thrust setting for each one of a plurality of engines to the aero- 
engine via a digital data network; 

providing a dedicated thrust setting to the aero-engine via a dedicated connection; and 

automatically assigning a network address, at the aero-engine, in dependence upon 
which one of the network thrust settings corresponds to the dedicated thrust setting. 

According to a still further aspect of the present invention there is provided a method of 
configuring networked aero-engines comprising the steps of: 

setting the thrust controls for the aero-engines to a predetermined configuration in 
which each thrust control has a different setting; informing each of the aero-engines 
using a digital data network of the configuration of the thrust controls; and 
automatically assigning a network address, at an aero-engine, in dependence upon 
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the thrust setting indicated for that engine by a dedicated connection and the 
configuration of the thrust controls. 

According to another aspect of the invention there is provided a control system 
comprising: 

a plurality of input devices; a plurality of remote output devices; a plurality of dedicated 
connections, wherein each one of the plurality of output devices is connected to one of 
the plurality of input devices by an associated one of the plurality of dedicated 
connections; and 

a digital data network interconnecting the plurality of input devices and the plurality of 
remote output devices, wherein each output device is operable to detect a digital 
network configuration error by comparing a value of a parameter received via its 
dedicated connection with the value of the same parameter received via the digital data 
network. 

Thus a digital data network can be used reliably to control the output devices. The 
control system can detect an incorrect network configuration such that the output 
devices are incorrectly addressed. 

According to a further aspect of the invention there is provided an aero-engine system 
comprising: 

a first input for receiving a dedicated connection to a first thrust control device; an 
interface for communicating with a digital data network connected to a plurality thrust 
control devices including the first thrust control device; and network control means for 
controlling the reception and transmission of data packets via the digital data network 
and operable to detect a digital network configuration error by comparing a value of the 
thrust setting received via its dedicated connection with the value of the thrust setting 
received via the digital data network. 
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For a better understanding of the present invention, reference wiil now be made by way 
of example only to: 

Figure 1 illustrates a networked control system; 
Figure 2 illustrates a data packet; and 
Figure 3 illustrates an output device. 

Figure 1 illustrates a control system (1) comprising: a plurality of input devices (10, 12 
14 16)- a piurality of remote output devices (50. 52, 54, 56); a plurality of dedicated 
connections (20, 22, 24, 26), wherein each one of the plurality of output devices (50, 
52 54 56) is connected to one of the plurality of input devices (10, 12, 14, 16) by an 
associated one of the plurality of dedicated connections ,20, 22, 24, 26); and a digta, 
data network (2) interconnecting the plura,ify of input devices (10, 12, 14, 16) and the 
plurality of remote output devices (50. 52, 54, 56), wherein each output dev.ce (50, 52, 
54. 56) is operable to use a network address dependent upon a value received v,a ,s 
dedicated connection. 

|„ more detail Figure 1 illustrates a networked control system 1. The control system 1 
comprises a plurality of man machine interfaces 10, 12, 14, 16; a processor 40; a 
switch 60; and a plurality of output devices 50, 52, 54 and 56. 

The plurality of man machine interfaces (MM) include a first MMI 10, a second MM! 12, 
a third MMI 14 and a fourth MMI 16. The plurality of output devices include a first 
output device 50 associated with the first MMI 10, a second output device 52 
associated with the second MMI 12, a third output device 54 associated with the th.rd 
MMI 14 and a fourth output device 56 associated with the fourth MMI 16. 

The first, second, third and fourth MMIs are electrically connected to the first, second, 
third and fourth output devices via a digital data network 2. 



0 



-5- 



The first, second, third and fourth MMIs are electrically connected, separately, to the 
processor 40 via the respective first, second, third and fourth digital data buses 30, 32, 
34, 36. The processor 40 is electrically connected to the switch 60 via the fifth digital 
data bus 42. The switch 60 is electrically connected, separately, to each of the first, 
second, third and fourth output devices via the respective sixth, seventh, eighth and 
ninth digital data buses 70, 72, 74 and 76. 

The first MMI 10 is electrically connected to the first output device 50 by a first 
dedicated hardwired connection 20. The second MMI 12 is electrically connected to the 
second output device 52 by a second dedicated hardwired connection 22. The third 
MMI 14 is electrically connected to the third output device 54 by a third dedicated 
hardwired connection 24. The fourth MMI 16 is electrically connected to the fourth 
output device 56 by a fourth dedicated hardwired connection 26. 

In one embodiment, the network 2 is used to control the engines of a four engine 
aeroplane. The first output device 50 is the outer port engine. The second output 
device 52 is the inner port engine: The third output device 54 is the inner starboard 
engine. The fourth output device 56 is the outer starboard engine. 

The first MMI 10 includes a throttle control, for the outer port engine, which can have 
any one of a number of settings. The first dedicated hardwired connection 20 sends 
the setting of the throttle control for the outside port engine to the first output device 50 
to control its throttle setting. 

The second MMI 12 includes a throttle control, for the inner port engine, which can 
have any one of a number of settings. The second dedicated hardwired connection 22 
sends the setting of the throttle control for the inner port engine to the second output 
device 52 to control its throttle setting. - * 

The third MMI 14 includes a throttle control, for the inner starboard engine, which can 
have any one of a number of settings. The third dedicated hardwired connection 24 
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sends the setting of the throttle control for the inner starboard engine to the third output 
device 54 to control its throttle setting. 

The fourth MMI 16 includes a throttle control, for the inner starboard engine, which can 
have any one of a number of settings. The fourth dedicated hardwired connection 26 
sends the setting of the throttle control for the outer starboard engine to the fourth 
output device 56 to control its throttle setting. 

The network 2 communicates using packet data. Figure 2 illustrates a packet 100. The 
packet 100 has a preamble header portion 102 and a payioad portion 104. The 
payload 104 carries the data to be communicated. The header portion 102 is used to 
identify the source and the destination of the packet. Unique network addresses are 
used to uniquely identify the correct destination/source. 

The address Address_OutputDevice_1 is reserved for the first output device 50 only. 
The address Address_OutputDevice_2 is reserved for the second output device 52 
only The address Address_OutputDevice_3 is reserved for the third output device 54 
only The address Address_OutputDevice_4 is reserved for the fourth output dev.ce 56 
only It is also possible to send a data packet -to more than one destination if they have 
a common broadcast address. The address Address_OutputDevice is reserved for 
sending a data packet simultaneously to the first, second, third and fourth output 
devices only. 

The network 2 is used to send redundant values for the throttle settings. 

The first throttle setting from the first MMI 10 is received by the processor 40. The 
processor 40 creates a first data packet 100 which is sent to the switch 60. The first 
packet header has a destination address (Address_OutputDevice_1 ) identifying only 
the first output device 50 as the destination and a payload specifying the first throttle 
setting The first output device 50 recovers the first throttle setting from the payload 
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The second throttle setting from the second MMI 12 is received by the processor 40. 
The processor 40 creates a second data packet 100 which is sent to the switch 60. 
The second packet header has a destination address (Address_OutputDevice__2) 
identifying only the second output device 52 as the destination and a payload specifying 
the second throttle setting. The second output device 52 recovers the second throttle 
setting from the payload 104. 

The third throttle setting from the third MMI 14 is received by the processor 40. The 
processor 40 creates a third data packet 100 which is sent to the switch 60. The third 
packet header has a destination address (Address_OutputDevice_3) identifying only 
the third output device 54 as the destination and a payload specifying the third throttle 
setting. The third output device 54 recovers the third throttle setting from the payload 
104. 

The fourth throttle setting from the fourth MMI 16 is received by the processor 40. The 
processor 40 creates a fourth data packet 100 which is sent to the switch 60. The 
fourth packet header has a destination address (Address_OutputDevice_4) identifying 
only the fourth output device 56 as the destination and a payload specifying the fourth 
throttle setting. The packet is routed to the fourth output device 56 using the 
destination address. The third output device 56 recovers the fourth throttle setting from 
the payload 104. 

Under normal operating conditions, the value of the throttle setting received as a data 
packet at a particular output device and the value received via its dedicated hardwired 
connection are the same. 

In the event that the network 2 is incorrectly configured or not yet configured so that the 
network 2 is not using correct addresses, the value of the throttle setting received at an 
output device via the network 2 will be different from the value received via the 
dedicated hardwired connection. The output device is arranged to detects this and set 
an alert. 
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The network 2 can be automatically configured or reconfigured in response to the alert 
by setting the throttle controls of the first, second, third and fourth MMIs into a 
predetermined configuration. Each one of the first, second, third and fourth throttle 
controls is set to a predetermined and different setting. The processor 40 detects that 
the output throttle settings provided by the MMIs have the predetermined configuration 
and enters a 'set-up' mode. 

In the 'set-up' mode the processor 40 creates a 'set-up' data packet that is addressed 
to all the output devices using Address_OutputDevice as the destination address in the 
header. 

The payload of the 'set-up' packet has a predetermined format. The payload separately 
identifies the first throttle setting received from the first MMI 10, the second throttle 
setting received from the second MMI 12, the third throttle setting received from the 
third MMI 14, and the fourth throttle setting received from the fourth MMI 16. 

The packet is sent by the processor 40 to switch 60. Each of the output devices 50,- 52, 
54 and 56 receives the 'set-up' packet. The header of the packet identifies the packet 
as a 'set-up' packet. 

Figure 3 is a schematic illustration of an output device. In this Figure only the first 
output device 50 is illustrated as an example, but the other output devices are similarly 
arranged. The first output device has an input 110 for connection to the dedicated 
hardwired connection 20, an interface 112 for connection to the network 2 via the fifth 
data bus 70, a network controller 1 14 connected to the input 110 and the interface 12, a 
read only memory 116 connected to the network controller 114 and aero-engine 
components 118 connected to the network controller 1 14 and the input 110. 

The network controller 114 of each one of the output devices detects that a 'set-up- 
packet has been received from the contents of the received packet header and enters a 
set-up mode. The network controller 114 determines whether it is located in the first, 
second, third or fourth output device by comparing the throttle value setting received 
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from the dedicated hardwired connection via the input 110 with each of the first, 
second, third and fourth throttle settings received in the payioad of the 'set-up' packet. 
If there is identity with the first throttle value, then the network controller 1 14 determines 
that it is in the first output device 50 and uses the address Address_OutputDevice_1 . tf 
there is identity with the second throttle value, then the network controller 114 
determines that it is in the second output device 52 and uses the address 
Address_OutputDevice_2. If there is identity with the third throttle value, then the 
network controller 114 determines that it is in the third output device 54 and uses the 
address Address_OutputDevice_3. If there is identity with the fourth throttle value, then 
the network controller 114 determines that it is in the fourth output device 56 and uses 
the address Address_OutputDevice_4. 

Each read only memory 116 permanently stores the address values: 
AddressJDutputDevice, Address_OutputDevice_1 , Address_OutputDevice__2, 
Address__OutputDevice_3, and Address_OutputDevice_4. 

The network controller 114 uses one of Address__OutputDevice_1 , 
Address_OutputDevice_2, Address_OutputDevice_3, and Address_OutputDevice^4 as 
its active address once it determines whether it is in the first, second, third or fourth 
output device. 

Although the preceding example relates to a four engine aeroplane, it should be 
realised that embodiments of the invention can find application in any multi-engine 
aeroplane. 

Although embodiments of the present invention have been described in the preceding 
paragraphs with reference to various examples, it should be appreciated that 
modifications to the examples given can be made without departing from the scope of 
the invention as claimed. For example, embodiments of the invention may find 
application in a distributed process or plant controller. 



1 



- 10 - 



Whilst endeavouring in the foregoing specification to draw attention to those features of 
the invention believed to be of particular importance it should be understood that the 
Applicant claims protection in respect of any patentable feature or combination of 
features hereinbefore referred to and/or shown in the drawings whether or not particular 
emphasis has been placed thereon. 



CLAIMS 



A control system comprising: a plurality of input devices; a plurality of remote 
output devices; a plurality of dedicated connections, wherein each one of the 
plurality of output devices is connected to one of the plurality of input devices by 
an associated one of the plurality of dedicated connections; and a digital data 
network interconnecting the plurality of input devices and the plurality of remote 
output devices, wherein each output device is operable to use a network address 
dependent upon a value received via its dedicated connection. 

A control system as claimed in claim 1, wherein each output device permanently 
stores a plurality of network addresses and is operable to select one of a the 
plurality of permanently stored network addresses in dependence upon a value 
received via its dedicated connection. 

A control system as claimed in claim 2, wherein each output device is operable 
to select one of the plurality of permanently stored network addresses in 
dependence upon an identity between a value received via its dedicated 
connection and one of a plurality of values. 

A control system as claimed in claim 3, wherein each output device receives the 
plurality of values as a value for each of the plurality of input devices via the 
digital data network. 

A control system as claimed in claim 4, wherein the values for each of the 
plurality of input devices are received in a single data packet. 

A control system as claimed in any preceding claim wherein each output device 
is arranged to compare a value received via its dedicated connection with at 
least first and second values received via the digital data network and to use a 
first address if the value received via its dedicated connection is the same as the 
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first value received via the digital data network and to use a second address if 
the value received via its dedicated connection is the same as the second value 
received via the digital data network. 

A control system as claimed in claim 6, wherein the first and second values are 
received in a data packet addressed to the plurality of output devices. 

A control system as claimed in claim 6 or 7, wherein the plurality of remote 
output devices include a port aero-engine and a starboard aero-engine and the 
plurality of input devices include a first thrust control for a port engine and a 
second thrust control for a starboard aero-engine. 

A control system as claimed in claim 8, wherein the plurality of dedicated 
connections include a first dedicated connection for providing the thrust control 
setting from the first thrust control to the port engine and a second dedicated 
connection for providing the thrust control setting from the second thrust control 
to the starboard engine. 

A control system as claimed in any preceding claim wherein each output device 
is arranged to compare a value received via its dedicated connection with at 
least first, second, third and fourth values received via the digital data network 
and to use a first address if the value received via its dedicated connection is the 
same as the first value received via the digital data network, to use a second 
address if the value received via its dedicated connection is the same as the 
second value received via the digital data network, to use a third address if the 
value received via its dedicated connection is the same as the third value 
received via the digital data network and to use a fourth address if the value 
received via its dedicated connection is the same as the fourth value received 
via the digital data network. 



- 13- 



11 A control system as claimed in claim 10, wherein the first, second, third and 
fourth values are received in a data packet addressed to the plurality of output 
devices. 

12 A control system as claimed in claim 10 or 11, wherein the plurality of remote 
output devices include a outer port aero-engine, an inner port aero-engine, an 
inner starboard aero-engine and an outer starboard aero-engine and the plurality 
of input devices include a first thrust control for an outer port aero-engine, a 
second thrust control for an inner port aero-engine, a third thrust control for an 
inner starboard aero-engine and a fourth thrust control for an outer starboard 
aero-engine. 

13 A control system as claimed in claim 12, wherein the plurality of dedicated 
connections include a first dedicated connection for providing the thrust control 
setting from the first thrust control to the outer port engine, a second dedicated 
connection for providing the thrust control setting from the second thrust control 
to the inner port engine, a third dedicated connection for providing the thrust 
control setting from the third thrust control to the inner starboard engine, and a 
fourth dedicated connection for providing the thrust control setting from the fourth 
thrust control to the outer starboard engine. 

14 An aero-engine system comprising: a first input for receiving a dedicated 
connection to a first thrust control device; an interface for communicating with a 
digital data network connected to a plurality thrust control devices including the 
first thrust control device; and network control means for controlling the reception 
and transmission of data packets via the digital data network and operable to 
use a network address dependent upon a value received via the first input. 

15 An aero-engine as claimed in claim 14, wherein the network control means is 
arranged to use a network address dependent upon an identity between a value 
received via the first input and a value received via the interface. 
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An aero-engine as claimed in claim 14 or 15, wherein the network control means 
is arranged to use a network address dependent upon which of a plurality of 
thrust settings, received the interface, corresponds to a thrust setting received 
via its input. 

An aero-engine system as claimed in claim 16, further comprising a memory that 
permanently stores a plurality of network addresses, wherein the network control 
means is operable to select one of the plurality of permanently stored network 
addresses in dependence upon which of a plurality of thrust settings, received m 
a data packet via the interface, corresponds to a thrust setting received via its 
input. 

A method of configuring a networked aero-engine comprising the steps of: 
providing a network thrust setting for each one of a plurality of engines to the 
aero-engine via a digital data network; providing a dedicated thrust setting to the 
aero-engine via a dedicated connection; and automatically assigning a network 
address, at the aero-engine, in dependence upon which one of the network 
thrust settings corresponds to the dedicated thrust setting. 

A method of configuring networked aero-engines comprising the steps of: setting 
the thrust controls for the aero-engines to a predetermined configuration in which 
each thrust control has a different setting; informing each of the aero-engines 
using a digital data network of the configuration of the thrust controls; and 
automatically assigning a network address, at an aero-engine, in dependence 
upon the thrust setting indicated for that engine by a dedicated connection and 
the configuration of the thrust controls. 

A control system comprising: a plurality of input devices; a plurality of remote 
output devices; a plurality of dedicated connections, wherein each one of the 
plurality of output devices is connected to one of the plurality of input devices by 
an associated one of the plurality of dedicated connections; and a digital data 
network interconnecting the plurality of input devices and the plurality of remote 
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output devices, wherein each output device is operable to detect a digital 
network configuration error by comparing a value of a parameter received via its 
dedicated connection with the value of the same parameter received via the 
digital data network. 

An aero-engine system comprising: a first input for receiving a dedicated 
connection to a first thrust control device; an interface for communicating with a 
digital data network connected to a plurality thrust control devices including the 
first thrust control device; and network control means for controlling the reception 
and transmission of data packets via the digital data network and operable to 
detect a digital network configuration error by comparing a value of the thrust 
setting received via its dedicated connection with the value of the thrust setting 
received via the digital data network. 

A control system or an aero-engine substantially as hereinbefore described with 
reference to and/or as shown in the accompanying drawings. 

Any novel subject matter or combination including novel subject matter 
disclosed, whether or not within the scope of or relating to the same invention as 
the preceding claims. 
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ABSTRACT 



A CONTROL SYSTEM 



A control system comprises: a plurality of input devices; a plurality of remote output 
devices; a plurality of dedicated connections and a digital data network interconnecting 
the plurality of input devices and the plurality of remote output devices. Each one of the 
plurality of output devices is connected to one of the plurality of input devices by an 
associated one of the plurality of dedicated connections. Each output device is 
operable to detect an addressing error in the digital network by comparing a value of a 
parameter received via its dedicated connection with the value of the same parameter 
received via the digital data network. Each output device is operable to use a network 
address dependent upon a value received via its dedicated connection. 
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